CVE-2026-54414CWE-22CWE-434path-traversalunrestricted-file-upload

CVE-2026-54414

Critical · published June 19, 2026

CVSS v3.1
9.8
EPSS
1%
Percentile
51.2
In the wild
Unconfirmed
What it is

FileRise before 3.16.0 is vulnerable to path traversal in the shared-folder upload endpoint (/api/folder/uploadToSharedFolder.php), leading to arbitrary file write and administrator account takeover. The upload filename is validated by FolderController with basename and REGEX_FILE_NAME, which permit URL-encoded sequences (the regex blocks / and \ but not %).

The record
Technical detail
CVSS v3.1
9.8 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00664 · 51.2th percentile
Weaknesses
CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal'); CWE-434 · Unrestricted Upload of File with Dangerous Type
Published
2026-06-19T10:17Z
References (3)
https://github.com/error311/FileRise · 309f9ea4-e3e9-4c6c-b79d-e8eb01244f2chttps://github.com/error311/FileRise/blob/v3.15.0/src/FileRise/Domain/UploadModel.php#L1023 · 309f9ea4-e3e9-4c6c-b79d-e8eb01244f2chttps://github.com/error311/FileRise/releases/tag/v3.16.0 · 309f9ea4-e3e9-4c6c-b79d-e8eb01244f2c
EPSS history
Timeline
  • 19 JUN 05:41Z
    FileRise shared-folder upload path traversal allows arbitrary file write and admin takeover
    cvelistv5